Fix result of Farbar Recovery Scan Tool (x64) Version:30-12-2015 Ran by lenovo (2015-12-31 13:50:40) Run:1 Running from C:\Users\lenovo\Downloads Loaded Profiles: lenovo (Available Profiles: lenovo) Boot Mode: Normal ============================================== fixlist content: ***************** Task: {E5C75F1A-E380-4F40-A1AE-8F2077ACFCEE} - System32\Tasks\psv_NewTech => /c regedit.exe /s "C:\ProgramData\Lightzap\Faxcom.reg" & del "C:\ProgramData\Lightzap\Faxcom.reg" & SCHTASKS /Delete /TN "psv_NewTech" /F <==== ATTENTION C:\ProgramData\Lightzap C:\ProgramData\Lightzaps R2 Lightzap; C:\ProgramData\\Lightzap\\Lightzap.exe [431104 2015-12-24] () [File not signed] CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csoB2NDXPP7CDOQ2yy0wGEFVdzjV5qaCHriDYDQH0kGDFKQtyBI1bieet_XvfkjrkMMyw4KS1wctWgtuiPLHMuBL2WpOh2IP9iocqM_cFlvMghQfIvFB7ffT719Wzn1ZTk918MuaAe-39A,, CHR DefaultSearchURL: Default -> hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csoB2NDXPP7CDOQ2yy0wGEFVdzjV5qaCHriDYDQH0kGDFKQtyBI1bieet_XvfkjrkMM-kLo1WMBjHdAebKbfHHmwulUadOps4C3vzbq2Hbb9gxy0QJJHDHwSJyph6k2_ftz5NK8FnOZLlA,,&q={searchTerms} CHR DefaultSearchKeyword: Default -> feed.sonic-search.com CHR DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms} HKU\S-1-5-21-2726230121-2360957633-3432668039-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csoB2NDXPP7CDOQ2yy0wGEFVdzjV5qaCHriDYDQH0kGDFKQtyBI1bieet_XvfkjrkMMpH-Q8uYHA-G2l-SiSm0Vz2oPy53hiaLCTX7uTQ2j7WTVy6uupWnCGhQgb54oftmHC_FMokU3Yng,,&q={searchTerms} HKU\S-1-5-21-2726230121-2360957633-3432668039-1001\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csoB2NDXPP7CDOQ2yy0wGEFVdzjV5qaCHriDYDQH0kGDFKQtyBI1bieet_XvfkjrkMMpH-Q8uYHA-G2l-SiSm0Vz2oPy53hiaLCTX7uTQ2j7WTVy6uupWnCGhQgb54oftmHC_FMokU3Yng,,&q={searchTerms} HKU\S-1-5-21-2726230121-2360957633-3432668039-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csoB2NDXPP7CDOQ2yy0wGEFVdzjV5qaCHriDYDQH0kGDFKQtyBI1bieet_XvfkjrkMMpH-Q8uYHA-G2l-SiSm0Vz2oPy53hiaLCTX7uTQ2j7WTVy6uupWnCGhQgb54oftmHC_FMokU3Yng,,&q={searchTerms} HKU\S-1-5-21-2726230121-2360957633-3432668039-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csoB2NDXPP7CDOQ2yy0wGEFVdzjV5qaCHriDYDQH0kGDFKQtyBI1bieet_XvfkjrkM-c5BKJRy2_ic4Ss8318HSnN65pJ5a6PaT6ShD__WwY7cCFPWY8QHtRc8ps4ebhO1QavTI9-SJDSw,, AppInit_DLLs: C:\ProgramData\Lightzap\Anbam.dll => C:\ProgramData\Lightzap\Anbam.dll [805376 2015-12-27] () AppInit_DLLs-x32: C:\ProgramData\Lightzap\Goodlax.dll => C:\ProgramData\Lightzap\Goodlax.dll [257536 2015-12-27] () DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes EmptyTemp: ***************** "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E5C75F1A-E380-4F40-A1AE-8F2077ACFCEE}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E5C75F1A-E380-4F40-A1AE-8F2077ACFCEE}" => key removed successfully C:\windows\System32\Tasks\psv_NewTech => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\psv_NewTech" => key removed successfully "C:\ProgramData\Lightzap" => not found. "C:\ProgramData\Lightzaps" => not found. Lightzap => service not found. Chrome HomePage => removed successfully Chrome DefaultSearchURL => not found. Chrome DefaultSearchKeyword => not found. Chrome DefaultSuggestURL => not found. HKU\S-1-5-21-2726230121-2360957633-3432668039-1001\Software\Microsoft\Internet Explorer\Main\\Search Bar => value removed successfully HKU\S-1-5-21-2726230121-2360957633-3432668039-1001\Software\Microsoft\Internet Explorer\Main\\SearchAssistant => value removed successfully HKU\S-1-5-21-2726230121-2360957633-3432668039-1001\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKU\S-1-5-21-2726230121-2360957633-3432668039-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully "C:\ProgramData\Lightzap\Anbam.dll" => Value data removed successfully. "C:\ProgramData\Lightzap\Goodlax.dll" => Value data removed successfully. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes => key not found. HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes => key not found. HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes => key not found. EmptyTemp: => 588.2 MB temporary data Removed. The system needed a reboot. ==== End of Fixlog 13:54:37 ====